Cover Image

SAP-DIFF: Semantic Adversarial Patch Generation for Black-Box Face Recognition Models via Diffusion Models

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Wang, Mingsi, Yao, Shuaiyin, Yue, Chang, Zhang, Lijie, Meng, Guozhu
Format:	Preprint
Published:	2025
Subjects:	Computer Vision and Pattern Recognition Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

A Survey on Physical Adversarial Attacks against Face Recognition Systems
by: Wang, Mingsi, et al.
Published: (2024)

Dormant: Defending against Pose-driven Human Image Animation
by: Zhou, Jiachen, et al.
Published: (2024)

BB-Patch: BlackBox Adversarial Patch-Attack using Zeroth-Order Optimization
by: Kumar, Satyadwyoom, et al.
Published: (2024)

Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models
by: Müller, Andreas, et al.
Published: (2024)

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
by: Liu, Tong, et al.
Published: (2025)

One Prompt to Verify Your Models: Black-Box Text-to-Image Models Verification via Non-Transferable Adversarial Attacks
by: Guo, Ji, et al.
Published: (2024)

CAAP: Capture-Aware Adversarial Patch Attacks on Palmprint Recognition Models
by: Liu, Renyang, et al.
Published: (2026)

EdgeFace: Efficient Face Recognition Model for Edge Devices
by: George, Anjith, et al.
Published: (2023)

Data-free Defense of Black Box Models Against Adversarial Attacks
by: Nayak, Gaurav Kumar, et al.
Published: (2022)

PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses
by: Xiang, Chong, et al.
Published: (2023)

Rethinking Robust Adversarial Concept Erasure in Diffusion Models
by: Yin, Qinghong, et al.
Published: (2025)

Patronus: Safeguarding Text-to-Image Models against White-Box Adversaries
by: Li, Xinfeng, et al.
Published: (2025)

Signal Adversarial Examples Generation for Signal Detection Network via White-Box Attack
by: Li, Dongyang, et al.
Published: (2024)

Enhancing Remote Adversarial Patch Attacks on Face Detectors with Tiling and Scaling
by: Okano, Masora, et al.
Published: (2024)

SemBind: Binding Diffusion Watermarks to Semantics Against Black-Box Forgery Attacks
by: Zhang, Xin, et al.
Published: (2026)

GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm
by: Wang, Hanrui, et al.
Published: (2025)

TriQDef: Disrupting Semantic and Gradient Alignment to Prevent Adversarial Patch Transferability in Quantized Neural Networks
by: Guesmi, Amira, et al.
Published: (2025)

DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversion
by: Wang, Hanrui, et al.
Published: (2025)

Is Diffusion Model Safe? Severe Data Leakage via Gradient-Guided Diffusion Model
by: Meng, Jiayang, et al.
Published: (2024)

DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection
by: Liu, Jiang, et al.
Published: (2023)

Adversarial Examples are Misaligned in Diffusion Model Manifolds
by: Lorenz, Peter, et al.
Published: (2024)

TPatch: A Triggered Physical Adversarial Patch
by: Zhu, Wenjun, et al.
Published: (2023)

Facial Recognition Leveraging Generative Adversarial Networks
by: Li, Zhongwen, et al.
Published: (2025)

CryptoFace: End-to-End Encrypted Face Recognition
by: Ao, Wei, et al.
Published: (2025)

Towards Black-Box Membership Inference Attack for Diffusion Models
by: Li, Jingwei, et al.
Published: (2024)

GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs
by: Basani, Advik Raj, et al.
Published: (2024)

Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation
by: Du, Xia, et al.
Published: (2025)

Real-world Adversarial Defense against Patch Attacks based on Diffusion Model
by: Wei, Xingxing, et al.
Published: (2024)

Adversarial 3D Virtual Patches using Integrated Gradients
by: You, Chengzeng, et al.
Published: (2024)

Review of Demographic Fairness in Face Recognition
by: Kotwal, Ketan, et al.
Published: (2025)

SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images
by: Fan, Mingyuan, et al.
Published: (2024)

Crafting Adversarial Inputs for Large Vision-Language Models Using Black-Box Optimization
by: Guan, Jiwei, et al.
Published: (2026)

Quantifying the Risk of Transferred Black Box Attacks
by: Cox, Disesdi Susanna, et al.
Published: (2025)

Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models
by: Zhang, Yimeng, et al.
Published: (2024)

Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks
by: Chattopadhyay, Nandish, et al.
Published: (2024)

Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models
by: Sato, Takami, et al.
Published: (2023)

Adversarial Training against Location-Optimized Adversarial Patches
by: Rao, Sukrut, et al.
Published: (2020)

Towards Physically Realizable Adversarial Attenuation Patch against SAR Object Detection
by: Zhang, Yiming, et al.
Published: (2026)

ODDR: Outlier Detection & Dimension Reduction Based Defense Against Adversarial Patches
by: Chattopadhyay, Nandish, et al.
Published: (2023)

Pura: An Efficient Privacy-Preserving Solution for Face Recognition
by: Xu, Guotao, et al.
Published: (2025)